Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

pangolin

A vulnerability has been found in fosrl Pangolin up to 1.15.4-s.3. This affects the function verifyRoleAccess/verifyApiKeyRoleAccess of the component Role Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Upgrading to version 1.15.4-s.4 mitigates this issue. The identifier of the patch is 5e37c4e85fae68e756be5019a28ca903b161fdd5. Upgrading the affected component is advised.

CVE-2026-3209 identifies an improper access control vulnerability in the fosrl Pangolin software, specifically affecting versions 1.15.4-s.0 through 1.15.4-s.3. The vulnerability resides in the Role Handler component's functions verifyRoleAccess and verifyApiKeyRoleAccess, which are responsible for enforcing role-based permissions and API key role validations. Due to flawed logic or insufficient checks, attackers can manipulate these functions to bypass intended access restrictions remotely, without requiring authentication or user interaction. This could allow unauthorized users to perform actions or access resources beyond their assigned roles. The vulnerability has been publicly disclosed, though no active exploitation has been reported. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:L), no user interaction (UI:N), and low impact on confidentiality, integrity, and availability (VC:L, VI:L, VA:L). The patch identified by commit 5e37c4e85fae68e756be5019a28ca903b161fdd5 addresses the issue and is included in version 1.15.4-s.4. Organizations using affected versions should upgrade promptly to mitigate risk. The vulnerability's exploitation could lead to unauthorized access to sensitive operations or data, undermining security policies enforced by role-based access controls.

Detailed information about CVE-2026-3209: Improper Access Controls in fosrl Pangolin affecting fosrl Pangolin. Get real-time updates, technical details, and mit

CVE-2026-3209: Improper Access Controls in fosrl Pangolin - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3209: Improper Access Controls in fosrl Pangolin

Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration

CVE-2025-56332 is an authentication bypass vulnerability identified in the fosrl/pangolin software, specifically affecting version 1.6.2 and earlier. The root cause is an insecure default configuration that fails to enforce authentication controls properly, allowing attackers to access protected resources without credentials. This vulnerability is classified under CWE-1188, which relates to insecure default configurations leading to security weaknesses. The CVSS 3.1 base score of 9.1 reflects a critical severity, with metrics indicating network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), and high impact on confidentiality (C:H) and integrity (I:H), but no impact on availability (A:N). Exploitation does not require authentication or user interaction, making it highly accessible to remote attackers. Although no public exploits have been reported yet, the vulnerability poses a significant risk of unauthorized data access and potential manipulation of Pangolin-managed resources. The lack of available patches or updates necessitates immediate mitigation through configuration hardening and access controls. Organizations should audit their deployments for default or weak configurations and implement compensating controls to prevent exploitation.

Detailed information about CVE-2025-56332: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-56332: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-56332: n/a

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component

CVE-2025-56333 is a critical security vulnerability affecting Fossorial fosrl/pangolin software versions 1.6.2 and earlier. The flaw resides in the two-factor authentication (2FA) component, where improper authentication validation allows remote attackers to escalate privileges without requiring authentication or user interaction. This vulnerability is classified under CWE-287 (Improper Authentication), indicating that the 2FA mechanism fails to correctly verify user credentials or tokens, enabling attackers to bypass security controls. The CVSS v3.1 base score of 9.8 reflects the vulnerability's high severity, with attack vector being network-based (AV:N), low attack complexity (AC:L), no privileges required (PR:N), and no user interaction needed (UI:N). The impact affects confidentiality, integrity, and availability (C:H/I:H/A:H), meaning attackers can fully compromise affected systems. No patches or fixes have been published yet, and no known exploits have been detected in the wild, but the critical nature of the vulnerability demands immediate attention. The vulnerability's presence in a 2FA component is particularly concerning as it undermines a key security control designed to prevent unauthorized access. Organizations relying on this software should consider it a high-risk threat vector.

Detailed information about CVE-2025-56333: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2026-3209: Improper Access Controls in fosrl PangolinCVE-2026-3209 0 A vulnerability has been found in fosrl Pangolin up to 1.15.4-s.3. This affects the function verifyRoleAccess/verifyApiKeyRoleAccess of the component Role Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Upgrading to version 1.15.4-s.4 mitigates this issue. The identifier of the patch is 5e37c4e85fae68e756be5019a28ca903b161fdd5. Upgrading the affected component is advised. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2026-3209 Join the discussion	CVE Database V5	02/25/2026, 23:02:10 UTC Added: 02/25/2026, 23:11:32 UTC
CVE-2025-56332: n/aCVE-2025-56332 0 Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration CriticalVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-56332 Join the discussion	CVE Database V5	12/30/2025, 00:00:00 UTC Added: 12/30/2025, 22:22:28 UTC
CVE-2025-56333: n/aCVE-2025-56333 0 An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component CriticalVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-56333 Join the discussion	CVE Database V5	12/29/2025, 00:00:00 UTC Added: 12/30/2025, 22:22:50 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional